Code injection

2020-03-0916:15:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.2%

JSON

Jenkins Skytap Cloud CI Plugin 2.07 and earlier transmits configured credentials in plain text as part of job configuration forms, potentially resulting in their exposure.

CPENameOperatorVersion
skytap_cloud_cile2.07

CPE	Name	Operator	Version
	skytap_cloud_ci	le	2.07

References

www.openwall.com/lists/oss-security/2020/03/09/1

jenkins.io/security/advisory/2020-03-09/